Overview

overview

10

Static

static

10

f49a62668c...18.exe

windows7-x64

10

f49a62668c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f49a62668cb8dad24b05a0d43dc56b87_JaffaCakes118

  • Size

    2.2MB

  • MD5

    f49a62668cb8dad24b05a0d43dc56b87

  • SHA1

    48ed2574f4058bd4cca55ae795f6bed40f94c38b

  • SHA256

    8e8af455a47a7dabd96bd941155b471ecf807976c08ab624db3601c6ed1fa97b

  • SHA512

    0b7395f1bfd628febff79bb61543c43d446443be902f5440cfc9be1fb7136b34d2f99e1171a5ba61049fa11d3a74f6e07b28ecf48266202f9c14cae7cfe56a81

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZY:0UzeyQMS4DqodCnoe+iitjWwwE

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f49a62668cb8dad24b05a0d43dc56b87_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections